Cloud Ops Engineer

Docusign • Seattle, WA

1d • Hybrid

About The Position

Docusign is hiring an individual contributor for its platform security engineering team. The role is described in the posting as Cloud Security Engineer and focuses on establishing and enforcing cloud security baselines, strengthening the existing security posture, and proactively protecting cloud infrastructure so the business can innovate securely. The position reports to the Director, Identity Security & Security Solutions Engineering.

The engineer will design scalable security controls for a global cloud environment; build and maintain automation, policy-as-code, and infrastructure-as-code solutions; and integrate security checks into development workflows and CI/CD pipelines. The role also involves cloud incident response, remediation and hardening, management of configuration drift and exceptions, operation of third-party cloud security platforms, and development of documentation and self-service resources. The position is hybrid, with at least two days per week in an office, subject to team variation and business needs.

Requirements

• At least 5 years of experience in cloud security engineering or a related field.
• Bachelor's degree in Computer Science, Engineering, or a related discipline.
• Experience with at least one programming language: Python, Go, or TypeScript.
• Experience with policy-as-code and infrastructure-as-code tools such as OPA, Sentinel, Conftest, Terraform, CloudFormation, or CDK.
• Experience integrating security controls into CI/CD pipelines.
• Experience with multi-cloud environments.
• Experience with Kubernetes and container security.
• Experience with incident response and root cause analysis in cloud environments.
• Experience with monitoring, alerting, and defining service level objectives.
• Experience authoring technical documentation, modules, and runbooks.
• Experience with cloud security posture management (CSPM/KSPM) tools.
• Experience hardening images and registries and implementing workload/runtime controls.
• Experience collaborating with engineering, IT, and security teams.

Nice To Haves

• Master's degree in Computer Science, Engineering, or a related discipline.
• Deep experience with Azure security services, architecture, and best practices.
• Knowledge of Wiz, Microsoft Defender, or similar CWPP/CNAPP solutions.
• Experience with AWS and/or GCP security controls.
• Experience with serverless security and securing cloud-native applications.
• Experience with regulatory compliance frameworks such as SOC 2, ISO 27001, or PCI DSS.
• Experience with automated remediation and security orchestration in cloud environments.
• Experience with secrets management and PKI in cloud platforms.

Responsibilities

• Design and implement scalable security controls and systems to protect cloud infrastructure across a global environment.
• Lead initiatives to establish, enforce, and continuously improve cloud security baselines and guardrails.
• Collaborate with engineering, product, and operations teams to embed security into infrastructure, platforms, and development workflows.
• Develop and maintain automation, policy-as-code, and infrastructure-as-code solutions to streamline security operations and compliance.
• Integrate security checks and guardrails into CI/CD pipelines to support secure development and early risk detection.
• Respond to cloud security incidents, conduct post-mortems, and drive remediation and platform hardening based on lessons learned.
• Harden cloud resources, images, and registries, and deliver reusable modules and templates for secure-by-default deployments.
• Monitor and reduce configuration drift, verify remediation effectiveness, and manage exceptions using clear criteria and review processes.
• Operate and optimize third-party cloud security platforms, ensuring reliability and alignment with service level objectives.
• Author documentation, runbooks, and self-service resources to support secure cloud adoption by product and platform teams.
• Report on security metrics, including coverage, drift, and incident response effectiveness, to support transparency and continuous improvement.

Benefits

• Company bonus plan for non-sales roles, calculated as a percentage of eligible wages and dependent on company performance.
• Paid time off and paid company holidays, based on region.
• Paid parental leave of up to six months after birth, adoption, or foster care placement.
• Health benefit plan options, including plans with 100% employer-paid premiums and plans requiring a minimum employee contribution, from day one of employment.
• Retirement and pension programs, with potential employer contributions.
• Learning and development options, including coaching, online courses, and education reimbursements.
• Compassionate care leave following the loss of a loved one and other life-changing events.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior